URLhaus Database

You are currently viewing the URLhaus database entry for https://tradeforex-marketsfx.com/css/payment/3ie9h0xh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:726757
URL: https://tradeforex-marketsfx.com/css/payment/3ie9h0xh/
URL Status:Offline
Host: tradeforex-marketsfx.com
Date added:2020-10-21 05:52:35 UTC
Last online:2020-10-26 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 05:57:01 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:4 days, 21 hours, 3 minutes Bad (down since 2020-10-26 03:00:01 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-24UDZX_14396946.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdVirustotal results 65.08%Heodo
2020-10-21WAH9DKJACJ.docdoc 890535144da2084ee8e9431e6521be9719100cc5bec7679a4d7bdce3763a692cVirustotal results 41.51%Heodo
2020-10-21REP_56PW4ION4TS0E.docdoc 58c9ea112ea67d4311a63c0cf87b4a97745c1e0f28e1a8a013047349d7d5bae4n/aHeodo
2020-10-21BAL_719023672154062924454.docdoc d8c3caed18462d4a897693d0d30e62d341e8947dde175f7a91cc1817d31e5932n/aHeodo
2020-10-21REP_482395709122.docdoc 28d5bdccce4b904f522a8aeda9f16fd87ea3831634ef34c5a660e3ae21a0229fVirustotal results 50.82%Heodo
2020-10-21CGZY_PO_10212020EX.docdoc 6a71e77723470c71b7481201af67c2a3fccef877d132370bdb2a3d8a705ce95dn/aHeodo
2020-10-218508256235947376866612.docdoc 988037ab30e7fefdcaff766f160658d982522969787c02fddfd09ce912573dc1n/aHeodo
2020-10-2157444573981374543.docdoc aef69b034379dfae45642c5c2271b27f04298dab56a9de3b608ab2d3cb00fa72Virustotal results 45.90%Heodo
2020-10-21K_C2DZZ8Y3.docdoc 9d3040374b112258a669d0ed8b5cc9bf7444e7ab0e937ebff0e3cab6286ab626n/aHeodo
2020-10-21PO_10212020EX.docdoc a80ce02ffb9b50e4f3f2618142c2645bbc77ff5055edc8819536d483ff232eccn/aHeodo
2020-10-21H_26817532.docdoc 1c69c8db95ce9e60d2cd1b61601b96a3a5bca68602f2da10fb5cbcfd2e354401Virustotal results 37.74%Heodo
2020-10-21REP_PO_10212020EX.docdoc 71ee0c6ba54fc6b648bd0b5a4a0a9856a061fd1c4cdbdbf677aaaf092bbd26f4Virustotal results 38.46%Heodo